Aurora

Active
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
25 Victims
Apr 16, 2026 First Discovered
Jul 29, 2026 Last Discovered
3 Days Inactive
0% Infostealer
1/1 Sites Online
Top Countries
US 7
DE 5
NL 3
CA 3
PE 1
AU 1
PH 1
GB 1
MV 1
Top Sectors
Manufacturing 8
Professional Services 5
Transportation 3
Healthcare 2
Retail & E-Commerce 2
Financial Services 2
Technology 1
Agriculture and Food Production 1
Hospitality 1
Known Locations (1)
Aur0ra Blog
u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion
Intelligence
Victims (25)
Van Eijck International Car Rescue
NL Transportation Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[recovery, rescue] Van Eijck International Car Rescue B.V. — a family-owned Dutch towing and recovery company with 225+ vehicles, 180+ employees, and 20 branch offices across the Netherlands and Spain....
Evosys Laser GmbH
DE Manufacturing Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[manufacturer] Evosys Laser GmbH — an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers. The dataset...
Pyramid Analytics B.V.
NL Technology Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[analytics] Pyramid Analytics B.V. — a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier. We obtained the...
Bretford Manufacturing
US Manufacturing Discovered: Jul 29, 2026 · Attack est.: Jul 28, 2026
Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in Franklin Park, Illinois. With ~60 employees and ~$10M annual revenue,...
Primed Halberstadt Medizintechnik
DE Healthcare Discovered: Jun 30, 2026 · Attack est.: Jun 29, 2026
[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four...
Corporación Primax S.A.
PE Retail & E-Commerce Discovered: Jun 23, 2026 · Attack est.: Jun 22, 2026
[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset...
Aerospace & Advanced Composites GmbH
DE Manufacturing Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained two complete NAS snapshots spanning 30+ years of operations:...
NTP B.V. Civil Engineering Construction
NL Manufacturing Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They build roads, lay cables, install sewers, and perform ground...
Kochs GmbH
DE Manufacturing Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordrhein-Westfalen, with ~240 employees across Germany, the Netherlands, and Hungary. The exposed material...
NationsBuilders Insurance Services
Financial Services Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance — a specialty managing general underwriter founded in Atlanta in 2001, acquired by...
Hagerman & Company
Professional Services Discovered: Jun 19, 2026 · Attack est.: Jun 18, 2026
*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, energy, defense, healthcare, and education. The exposed dataset includes: Complete proprietary source...
Allan Brothers Fruit
US Agriculture and Food Production Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in Naches, Washington. Allan Brothers packs and ships apples and cherries from a 300,000 sq ft cold-storage facility, employing...
Diamond Truck Centres
CA Transportation Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue, 250 employees). The dataset spans 17 years of unbroken operational history...
Sumitomo Electric Bordnetze
DE Manufacturing Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing approximately 40,000 people across 14 countries. Exfiltrated 1.1 terabytes of data from five...
ALS Global
AU Professional Services Discovered: Jun 19, 2026 · Attack est.: Jun 4, 2026
[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ employees, and operations in 65+ countries — identified unauthorised access to its...
Avanti Windows & Doors
US Manufacturing Discovered: May 12, 2026 · Attack est.: May 11, 2026
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regional offices across Nevada, Texas, California, and Florida. The exposed material includes: Plaintext SQL Server...
Atlas Metal Industries Inc
CA Manufacturing Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida. The dataset is a complete Microsoft Dynamics GP environment: production databases, payroll records, system...
Costa Solutions, LLC
US Professional Services Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 200–1,000 employees. The file server contained the complete...
Bayou Title, Inc.
US Financial Services Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-service locations statewide. The exfiltrated data spans 20+ years of operations (2004–2026)...
Startec Group of Companies
PH Professional Services Discovered: May 12, 2026 · Attack est.: Apr 22, 2026
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Cawthorn. Startec designs, fabricates, installs, and services compression, process, and refrigeration systems for oil-and-gas operators...
NorthWest Handling Systems
CA Transportation Discovered: May 12, 2026 · Attack est.: Apr 22, 2026
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with branches across WA, OR, and AK. The dump is the entire corporate file...
Law Offices of Michael A. Freedman, P.A. (maflaw.com)
US Professional Services Discovered: Apr 29, 2026 · Attack est.: Apr 22, 2026
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at root level / 196,701 files / 19,231 directories, dated as...
Baresque Group
GB Retail & E-Commerce Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and Brussels. The exposed material includes: 100+ passport scans, 35 birth certificates, 60+...
Cheval Blanc Randheli
MV Hospitality Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passport scan images spanning January 2015 through October 2024, organised in daily folders within monthly...
Advanta Genetics LLC
US Healthcare Discovered: Apr 29, 2026 · Attack est.: Apr 16, 2026
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives — including highly sensitive chronic...